1#!/usr/bin/env bash
2# verify-environment.sh
3# Verifies the local environment for creating a hosted Foundry agent with `azd ai`.
4# Runs all the read-only checks in one pass and prints a single concise summary,
5# so the agent does not have to run (and reason over) each azd command separately.
6#
7# Usage:
8#   ./verify-environment.sh
9#
10# Output: human-readable summary lines, each prefixed with [OK], [WARN], or [ACTION].
11# Exit code: 0 if no blocking actions, 1 if at least one [ACTION] is required.
12 
13set -uo pipefail
14 
15ACTION_REQUIRED=0
16 
17note_ok()     { echo "[OK] $1"; }
18note_warn()   { echo "[WARN] $1"; }
19note_action() { echo "[ACTION] $1"; ACTION_REQUIRED=1; }
20 
21# Refresh PATH to pick up recently-installed tools (e.g. azd installed in same session)
22if [ -f /etc/environment ]; then
23  # shellcheck disable=SC1091
24  . /etc/environment 2>/dev/null || true
25fi
26hash -r 2>/dev/null || true
27 
28# 1. Required CLIs
29AZD_AVAILABLE=1
30AZ_AVAILABLE=1
31 
32if ! command -v azd >/dev/null 2>&1; then
33  note_action "Azure Developer CLI (azd) is not installed. Install it from https://aka.ms/azd-install, then re-run."
34  AZD_AVAILABLE=0
35fi
36 
37if ! command -v az >/dev/null 2>&1; then
38  note_action "Azure CLI (az) is not installed. Install it from https://aka.ms/installazurecli, then re-run."
39  AZ_AVAILABLE=0
40fi
41 
42if [ "$AZD_AVAILABLE" -eq 0 ] || [ "$AZ_AVAILABLE" -eq 0 ]; then
43  echo ""
44  echo "Summary: CLI missing -- cannot continue."
45  exit 1
46fi
47 
48AZD_VERSION="$(azd version --output json 2>/dev/null | python3 -c 'import json,sys; print(json.load(sys.stdin).get("azd",{}).get("version","unknown"))' 2>/dev/null || echo unknown)"
49note_ok "azd installed (version ${AZD_VERSION})."
50 
51AZ_VERSION="$(az version --query '"azure-cli"' -o tsv 2>/dev/null || echo unknown)"
52note_ok "Azure CLI installed (version ${AZ_VERSION})."
53 
54# 2. Required azd extensions
55EXT_JSON="$(azd extension list --output json 2>/dev/null || echo '[]')"
56for ext in azure.ai.agents azure.ai.projects; do
57  if printf '%s' "$EXT_JSON" | grep -q "$ext"; then
58    note_ok "Extension '$ext' is installed."
59  else
60    note_action "Extension '$ext' is missing. Run: azd extension install $ext"
61  fi
62done
63 
64# 3. Auth status
65AZD_AUTH_OUTPUT="$(azd auth login --check-status 2>&1)"; AZD_AUTH_EXIT=$?
66if printf '%s' "$AZD_AUTH_OUTPUT" | grep -Eiq '(not[[:space:]]+logged[[:space:]]+in|not[[:space:]]+authenticated|no[[:space:]]+account|login[[:space:]]+required|please[[:space:]]+run.*azd[[:space:]]+auth[[:space:]]+login|run.*azd[[:space:]]+auth[[:space:]]+login|expired)'; then
67  note_action "Not logged in to azd. Ask the user to run 'azd auth login' (it opens a browser; never run it for them)."
68elif printf '%s' "$AZD_AUTH_OUTPUT" | grep -Eiq '(logged[[:space:]]+in|authenticated|already[[:space:]]+logged[[:space:]]+in)'; then
69  note_ok "Logged in to azd."
70elif [ "$AZD_AUTH_EXIT" -eq 0 ]; then
71  # Unrecognized output -- fall back to exit code
72  note_ok "Logged in to azd."
73else
74  note_action "Unable to verify azd auth status. Ask the user to run 'azd auth login' and re-run this script."
75fi
76 
77AZ_ACCOUNT_JSON="$(az account show --output json 2>/dev/null || true)"
78if [ -z "$AZ_ACCOUNT_JSON" ]; then
79  note_action "Not logged in to Azure CLI. Ask the user to run 'az login' (it opens a browser; never run it for them)."
80else
81  AZ_ACCOUNT_PARSED="$(printf '%s' "$AZ_ACCOUNT_JSON" | python3 -c 'import json,sys
82try:
83    d=json.load(sys.stdin)
84except Exception:
85    raise SystemExit(1)
86if not isinstance(d, dict):
87    raise SystemExit(1)
88print((d.get("name") or "unknown").replace("\t", " "), d.get("state") or "", sep="\t")
89' 2>/dev/null || true)"
90  if [ -z "$AZ_ACCOUNT_PARSED" ]; then
91    note_action "Unable to verify Azure CLI login status. Ask the user to run 'az login' and re-run this script."
92  else
93    IFS=$'\t' read -r AZ_SUB_NAME AZ_SUB_STATE <<< "$AZ_ACCOUNT_PARSED"
94    AZ_SUB_STATE="${AZ_SUB_STATE//$'\r'/}"
95    if [ -n "$AZ_SUB_STATE" ] && [ "$AZ_SUB_STATE" != "Enabled" ]; then
96      note_action "Azure CLI active subscription state is '${AZ_SUB_STATE}'. Ask the user to select an enabled subscription with 'az account set --subscription <id>'."
97    else
98      note_ok "Azure CLI logged in (subscription: ${AZ_SUB_NAME:-unknown})."
99    fi
100  fi
101fi
102 
103if [ "$ACTION_REQUIRED" -eq 1 ]; then
104  echo ""
105  echo "Summary: action required -- resolve the [ACTION] items above before continuing."
106  exit 1
107fi
108 
109# 4. Foundry project endpoint (optional at this stage)
110# Short-circuit when there's no azd project in cwd: `azd ai project show` / `agent show`
111# would just return nothing after a ~3s subprocess each.
112if [ ! -f "azure.yaml" ]; then
113  note_warn "No Foundry project endpoint set yet. A new project will be created at provision/deploy time, or supply an existing project resource ID."
114  note_ok "No agent deployed yet. Proceed with create."
115else
116  PROJECT_JSON="$(azd ai project show --output json 2>/dev/null || echo '')"
117  ENDPOINT=""
118  if [ -n "$PROJECT_JSON" ]; then
119    ENDPOINT="$(printf '%s' "$PROJECT_JSON" | python3 -c 'import json,sys
120try:
121    d=json.load(sys.stdin)
122except Exception:
123    print(""); raise SystemExit
124if isinstance(d,dict):
125    for k in ("endpoint","projectEndpoint","aiProjectEndpoint"):
126        if d.get(k):
127            print(d[k]); break
128' 2>/dev/null)"
129  fi
130  if [ -n "$ENDPOINT" ]; then
131    note_ok "Foundry project endpoint configured: ${ENDPOINT}"
132  else
133    note_warn "No Foundry project endpoint set yet. A new project will be created at provision/deploy time, or supply an existing project resource ID."
134  fi
135 
136  # 5. Agent deployment status
137  AGENT_JSON="$(azd ai agent show --output json 2>/dev/null || echo '')"
138  if [ -n "$AGENT_JSON" ]; then
139    STATUS="$(printf '%s' "$AGENT_JSON" | python3 -c 'import json,sys
140try:
141    d=json.load(sys.stdin)
142except Exception:
143    print("unknown"); raise SystemExit
144print(d.get("status","unknown") if isinstance(d,dict) else "unknown")' 2>/dev/null)"
145    case "$STATUS" in
146      active|deployed) note_ok "An agent is already deployed (status: ${STATUS}). Skip to deploy.md to redeploy, or tools to add a tool." ;;
147      not_deployed)    note_ok "No agent deployed yet (status: not_deployed). Proceed with create." ;;
148      *)               note_warn "Agent status: ${STATUS}." ;;
149    esac
150  else
151    note_ok "No agent deployed yet. Proceed with create."
152  fi
153fi
154 
155echo ""
156if [ "$ACTION_REQUIRED" -eq 1 ]; then
157  echo "Summary: action required -- resolve the [ACTION] items above before continuing."
158  exit 1
159else
160  echo "Summary: environment ready for 'azd ai' hosted-agent creation."
161  exit 0
162fi
163